Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/7385131C157A11F1A388FAFB3D3D8C67.roa
File:                     7385131C157A11F1A388FAFB3D3D8C67.roa (raw, json)
Hash identifier:          vklspRRd5iKi+EqvD4O+ToWckx6cWSzBe46wODutGYU=
Subject key identifier:   DD:F5:1A:E9:24:67:2F:7C:E3:C7:55:63:9A:06:A2:DE:7E:B9:B0:39
Certificate issuer:       /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Certificate serial:       08E8
Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/7385131C157A11F1A388FAFB3D3D8C67.roa
Signing time:             Sun 01 Mar 2026 14:25:09 +0000
ROA not before:           Sun 01 Mar 2026 14:25:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.94.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
                          rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
        Validity
            Not Before: Mar  1 14:25:09 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a44c45-5a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1a:d2:28:36:b6:e9:94:c3:d9:83:9e:b9:d6:
                    68:4d:67:17:3e:bc:75:62:75:3c:4e:11:6a:9b:c8:
                    21:40:7d:64:78:f7:34:f5:41:32:29:6b:29:04:d9:
                    3b:04:cf:00:03:bc:59:c3:cf:e3:1b:12:bf:65:fb:
                    50:6b:02:20:fd:a2:ac:84:fa:bc:5d:f5:a1:f4:ad:
                    81:80:ab:35:ad:95:d7:ca:be:de:46:50:0c:c2:d0:
                    7b:d9:77:09:c9:54:f1:64:43:1d:fc:61:5d:35:2c:
                    11:b5:cc:63:30:96:f7:6f:a5:a8:cf:c8:a4:49:49:
                    39:1e:89:0d:a0:06:7d:95:95:75:b3:71:76:96:1f:
                    3e:f8:dc:20:4a:a6:91:af:e5:f9:61:bd:de:00:1e:
                    ac:21:ee:a9:6a:24:28:c0:09:b8:f6:e4:be:f9:d4:
                    b0:84:c5:e1:df:f6:60:ef:7e:12:97:86:db:c8:7a:
                    06:53:b5:a2:e1:6b:cc:09:85:f9:da:a0:3e:93:4b:
                    42:e9:da:59:6a:61:47:a0:29:4b:c1:28:42:68:90:
                    cb:36:12:4a:20:e6:87:8a:f0:3f:ea:0b:c4:b6:40:
                    f3:f6:a9:be:c6:07:41:b0:b1:f7:f8:a0:ec:19:46:
                    41:8c:49:b2:4b:65:a9:a0:02:61:d8:44:64:b5:f1:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F5:1A:E9:24:67:2F:7C:E3:C7:55:63:9A:06:A2:DE:7E:B9:B0:39
            X509v3 Authority Key Identifier:
                keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/7385131C157A11F1A388FAFB3D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:76:55:88:95:4d:82:1d:a6:df:a0:3f:c7:4c:26:72:72:b0:
         58:61:dc:6b:f6:02:3b:01:bc:43:c0:b0:2e:89:26:1f:65:c7:
         c6:77:16:ce:7f:8c:6f:47:d7:3c:a1:2d:8f:b6:48:93:3f:e8:
         cb:79:81:b9:3c:ae:06:3c:a9:4a:5e:f4:69:14:1f:38:63:a4:
         7b:e4:65:53:b3:ef:30:00:ed:36:9f:94:7a:8b:ec:89:0e:ad:
         19:d5:94:cd:45:ce:3a:d2:f2:a8:f0:86:9b:ea:4e:b6:a9:6a:
         30:19:30:90:4d:4a:19:f0:25:ff:33:4f:f7:68:ed:a5:12:c8:
         4f:24:8a:6a:88:dc:59:38:a2:b1:ec:fb:c3:bc:10:50:89:27:
         3b:8f:13:4a:d1:eb:50:bc:2d:12:34:56:da:63:f2:9f:3d:13:
         02:9a:eb:39:8c:d4:b6:b4:74:0f:ea:75:6a:04:a3:18:a1:e3:
         80:61:c5:20:b2:b9:72:7e:81:6e:83:93:5d:96:65:2b:2a:8d:
         64:e2:8a:a1:7e:46:04:69:be:fb:c1:4b:c0:ef:80:23:69:ae:
         5f:d3:cd:66:11:3f:d4:61:6e:7a:06:b9:37:91:99:90:ad:2a:
         a5:98:a8:61:4d:eb:14:af:22:d9:91:33:bd:e2:87:c8:9a:db:
         47:78:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:23 2026 by rpki-client